| logs:AssociateKmsKey | Admin |
| logs:CreateDelivery | Admin |
| logs:CreateLogAnomalyDetector | Admin |
| logs:CreateLogDelivery | Admin |
| logs:CreateLogGroup | Admin |
| logs:DeleteAccountPolicy | Admin |
| logs:DeleteDataProtectionPolicy | Admin |
| logs:DeleteDelivery | Admin |
| logs:DeleteDeliveryDestination | Admin |
| logs:DeleteDeliveryDestinationPolicy | Admin |
| logs:DeleteDeliverySource | Admin |
| logs:DeleteDestination | Admin |
| logs:DeleteLogAnomalyDetector | Admin |
| logs:DeleteLogDelivery | Admin |
| logs:DeleteLogGroup | Admin |
| logs:DeleteLogStream | Admin |
| logs:DeleteQueryDefinition | Admin |
| logs:DeleteResourcePolicy | Admin |
| logs:DeleteRetentionPolicy | Admin |
| logs:DeleteSubscriptionFilter | Admin |
| logs:DisassociateKmsKey | Admin |
| logs:PutAccountPolicy | Admin |
| logs:PutDataProtectionPolicy | Admin |
| logs:PutDeliveryDestination | Admin |
| logs:PutDeliveryDestinationPolicy | Admin |
| logs:PutDeliverySource | Admin |
| logs:PutDestination | Admin |
| logs:PutDestinationPolicy | Admin |
| logs:PutQueryDefinition | Admin |
| logs:PutResourcePolicy | Admin |
| logs:PutRetentionPolicy | Admin |
| logs:PutSubscriptionFilter | Admin |
| logs:StartLiveTail | Admin |
| logs:StopLiveTail | Admin |
| logs:Unmask | Admin |
| logs:UpdateAnomaly | Admin |
| logs:UpdateLogAnomalyDetector | Admin |
| logs:UpdateLogDelivery | Admin |
| logs:CancelExportTask | Operator |
| logs:CreateExportTask | Operator |
| logs:CreateLogStream | Operator |
| logs:DeleteMetricFilter | Operator |
| logs:PutLogEvents | Operator |
| logs:PutMetricFilter | Operator |
| logs:StartQuery | Operator |
| logs:StopQuery | Operator |
| logs:TagLogGroup | Operator |
| logs:TagResource | Operator |
| logs:TestMetricFilter | Operator |
| logs:UntagLogGroup | Operator |
| logs:UntagResource | Operator |
| logs:FilterLogEvents | ReadOnly |
| logs:GetLogEvents | ReadOnly |
| logs:DescribeAccountPolicies | Metadata |
| logs:DescribeDeliveries | Metadata |
| logs:DescribeDeliveryDestinations | Metadata |
| logs:DescribeDeliverySources | Metadata |
| logs:DescribeDestinations | Metadata |
| logs:DescribeExportTasks | Metadata |
| logs:DescribeLogGroups | Metadata |
| logs:DescribeLogStreams | Metadata |
| logs:DescribeMetricFilters | Metadata |
| logs:DescribeQueries | Metadata |
| logs:DescribeQueryDefinitions | Metadata |
| logs:DescribeResourcePolicies | Metadata |
| logs:DescribeSubscriptionFilters | Metadata |
| logs:GetDataProtectionPolicy | Metadata |
| logs:GetDelivery | Metadata |
| logs:GetDeliveryDestination | Metadata |
| logs:GetDeliveryDestinationPolicy | Metadata |
| logs:GetDeliverySource | Metadata |
| logs:GetLogAnomalyDetector | Metadata |
| logs:GetLogGroupFields | Metadata |
| logs:GetLogRecord | Metadata |
| logs:GetQueryResults | Metadata |
| logs:Link | Metadata |
| logs:ListAnomalies | Metadata |
| logs:ListLogAnomalyDetectors | Metadata |
| logs:ListTagsForResource | Metadata |
| logs:ListTagsLogGroup | Metadata |
